Manifest

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/0/9E501456E122798BDB8F739545BF6148C7CD1165.mft
File:                     9E501456E122798BDB8F739545BF6148C7CD1165.mft (raw, json)
Hash identifier:          C321g4gurCkXIBZ4eGmzfQU0FfPq3WcO6Z1wJMmNr1I=
Subject key identifier:   AF:B2:46:14:D2:3F:8E:BC:E9:13:9D:72:94:F4:5D:D6:E0:63:DC:02
Authority key identifier: 9E:50:14:56:E1:22:79:8B:DB:8F:73:95:45:BF:61:48:C7:CD:11:65
Certificate issuer:       /CN=9e501456e122798bdb8f739545bf6148c7cd1165
Certificate serial:       1B2A6F28AE9DC8505EAE810602BB43061B79B42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlAUVuEieYvbj3OVRb9hSMfNEWU.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/0/9E501456E122798BDB8F739545BF6148C7CD1165.mft
Manifest number:          02BF
Signing time:             Thu 03 Apr 2025 00:08:06 +0000
Manifest this update:     Thu 03 Apr 2025 00:03:06 +0000
Manifest next update:     Fri 04 Apr 2025 01:04:06 +0000
Files and hashes:         1: AS199762.asa (hash: jlZTD7Pu0AYuwHnvBlnSPWkvMnZBmwEgl6sDAEEIqA4=)
                          2: AS199376.asa (hash: yqB9N8fpSyJzvCcnXKDidq045DyAO47nWFeD1aAKloE=)
                          3: 9E501456E122798BDB8F739545BF6148C7CD1165.crl (hash: 0nY42zhsVGyfrjQcEFN07H6Zx0+0BfIHdjT5Kk7vlJg=)
Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/0/9E501456E122798BDB8F739545BF6148C7CD1165.crl
                          rsync://rpki.komorebi.network/repo/komorebi/0/9E501456E122798BDB8F739545BF6148C7CD1165.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlAUVuEieYvbj3OVRb9hSMfNEWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2a:6f:28:ae:9d:c8:50:5e:ae:81:06:02:bb:43:06:1b:79:b4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e501456e122798bdb8f739545bf6148c7cd1165
        Validity
            Not Before: Apr  3 00:03:06 2025 GMT
            Not After : Apr  4 01:04:06 2025 GMT
        Subject: CN=AFB24614D23F8EBCE9139D7294F45DD6E063DC02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:9f:85:0d:78:6d:1b:5a:c8:fd:d5:8b:df:
                    f8:c8:1e:85:c8:84:b3:03:d6:c1:69:15:64:82:13:
                    22:54:c6:12:ac:e3:71:04:99:d3:c6:f2:35:34:3a:
                    81:77:51:83:bd:45:bc:89:64:fa:a3:ed:e6:ec:9c:
                    5f:c8:f7:09:e2:09:45:c8:15:92:07:fd:fa:0f:69:
                    bb:3b:24:9f:64:f2:50:12:7a:4d:cb:8f:6e:ed:8e:
                    06:ec:26:e0:37:94:5c:1d:af:32:95:52:5c:0e:f1:
                    0c:ad:0f:36:3c:89:76:d0:8d:94:84:0a:52:6f:47:
                    75:12:c1:2f:51:7c:56:c6:89:d7:7d:ef:23:67:d8:
                    60:3f:3b:b5:be:0f:ff:58:48:7a:29:4b:cf:ab:cd:
                    b8:db:ef:d9:07:a5:d9:13:e9:2e:be:ae:8c:16:78:
                    18:5d:9b:1d:ee:b9:6a:b7:f0:3a:b7:da:6d:87:99:
                    9d:b2:e3:be:9a:d4:82:86:ad:c2:eb:62:36:00:57:
                    67:1b:04:6d:01:77:19:84:aa:f3:2a:80:ce:54:e0:
                    1b:be:91:d3:42:76:5b:08:02:8b:b2:7d:42:6b:50:
                    bc:21:16:5c:89:bc:09:40:84:87:ec:a0:6f:d5:ec:
                    d6:1f:36:86:e3:2e:95:cb:69:b4:c7:f8:c7:5d:0e:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B2:46:14:D2:3F:8E:BC:E9:13:9D:72:94:F4:5D:D6:E0:63:DC:02
            X509v3 Authority Key Identifier:
                keyid:9E:50:14:56:E1:22:79:8B:DB:8F:73:95:45:BF:61:48:C7:CD:11:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/0/9E501456E122798BDB8F739545BF6148C7CD1165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlAUVuEieYvbj3OVRb9hSMfNEWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/0/9E501456E122798BDB8F739545BF6148C7CD1165.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:0d:d5:f3:24:61:77:9b:78:79:cc:c4:8f:25:57:50:d4:
         a5:a9:47:df:62:ee:57:c7:ec:81:6c:1c:37:7b:a7:31:b6:87:
         a4:78:c6:0c:8e:67:3d:8b:65:2a:c8:5b:79:7a:b1:5d:37:09:
         35:76:3b:5a:43:d6:5f:75:51:82:85:f6:f3:b2:50:81:a7:73:
         2e:64:62:6d:3f:e8:33:10:2e:a9:59:2a:6d:82:cf:d5:5e:24:
         0b:11:37:49:ad:f9:d1:03:17:d7:6a:e1:f4:14:06:9e:0e:13:
         50:36:be:36:05:74:76:40:9c:16:de:95:d2:81:2b:22:be:13:
         91:e0:53:d0:7c:a7:5e:1c:81:75:37:91:03:b5:18:56:eb:f4:
         67:43:63:61:df:c6:83:ad:3f:98:9a:40:75:2c:84:44:58:48:
         b0:23:1a:55:bc:46:45:be:1f:dd:0a:54:b8:a6:01:4e:97:4f:
         3d:65:9e:71:46:c5:4d:1f:df:a2:e8:43:1f:d9:38:1a:ee:f9:
         e3:d1:71:21:8b:b3:51:d2:cd:e2:85:37:bc:c2:5d:b0:d3:68:
         ca:fe:ab:f9:01:82:68:de:8a:03:2d:f8:d8:7b:ae:12:fd:32:
         00:46:8b:49:df:f0:27:a9:c2:c4:d5:54:d2:48:e6:c3:bb:13:
         88:19:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:07 2025 by rpki-client